Website Privacy Policy

1. Privacy at a glance

This site sets no cookies, uses no tracking and loads nothing from third-party servers. Personal data only arises in the host’s server logs, when you join the waitlist, when you buy a subscription, when you submit a declaration through “Verträge hier kündigen” (cancel contracts here) or “Vertrag widerrufen” (withdraw from contract), and when you email me. Personal data is any data that can identify you personally.

2. Controller

Michael Schuier
c/o IP-Management #11109
Ludwig-Erhard-Straße 18
20459 Hamburg
Germany

Email: business (at) michael-schuier (dot) de

3. Server log files

The host automatically collects and stores information that your browser transmits in server log files:

• browser type and version
• operating system
• referrer URL
• host name of the accessing computer
• time of the request
• IP address

This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

According to IONOS, this access data is stored for eight weeks and then deleted; IONOS stores the IP address only in shortened (anonymized) form.

The prices on the home page are loaded from vidioo.app itself. Only these logs arise in the process.

4. Hosting

This website is hosted on servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the access data on my behalf (Art. 28 GDPR). More information: IONOS privacy policy.

5. No cookies, no tracking, no third-party content

No cookies are set and no analytics or advertising tools are used. Fonts, videos and scripts are on this site’s own web space; no data is transferred to third parties when you visit, and the site stores nothing on your device. This applies to vidioo.app. When you buy or manage a subscription, you move to pages run by Stripe (section 7); their rules apply there.

6. Beta waitlist

On the home page you can sign up to receive exactly one email when the beta starts. There is no newsletter. The legal basis is your consent (Art. 6(1)(a) GDPR).

Confirmation by email (double opt-in). After you submit the form, I send you a confirmation email. Until you confirm, I do not store your address: it is only contained, encrypted, in the link in that email, which expires after 48 hours. You are added to the list only when you click “Ja, vormerken” (yes, sign me up) via the link. If you do not confirm, nothing else happens.

What is stored. After confirmation I store your email address, the time of sign-up and of confirmation, and the version of the consent text. I need the times to be able to prove your consent (Art. 7(1) GDPR). I do not store your IP address for this.

Protection against abuse. To stop anyone from flooding other people’s inboxes with confirmation emails, only a salted hash with a timestamp is kept per connection and per email address, never the address itself. These values expire after one hour at most and are deleted the next time the form is used. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operation free of abuse).

Where the data is kept. The list is stored on this site’s web space at IONOS, and the emails are sent by the IONOS mail server (see Hosting). The data is not passed on to third parties. Each time someone confirms, I receive a notice that someone has signed up, without your address.

Withdrawal and deletion. You can withdraw your consent at any time without giving reasons: just write to the email address under “Controller” and I will delete your address. The withdrawal applies to the future. The whole list will be deleted no later than six months after the beta starts.

Sign-ups from 20 October 2026 that were made without a confirmation email are not used and have been deleted.

7. Buying a subscription

Process. When you choose a price in the price overview, you first see an order summary on vidioo.app. Only the button there takes you to Stripe’s payment page (checkout.stripe.com). The seller of the subscription is Sold through Link, LLC (“Link”), a Stripe group company based in the USA. Link processes the order, payment, sales tax, receipts, payment support and fraud prevention as an independent controller under the Link privacy policy; the Stripe privacy policy applies to payment processing. The payment page loads content from Stripe and may set cookies there; Stripe governs this.

What I receive from Link and Stripe. Link passes on the details of your order to me: name, email address, billing country or billing address, the price purchased, status and period of the subscription and a customer identifier. I do not see complete payment details such as card numbers. This data is held in my Stripe account, which Stripe stores on my behalf (Art. 28 GDPR).

What is kept on my web space. For activation I keep a license list on the web space at IONOS. Per subscription it contains only: the Stripe identifiers of the subscription and the customer, the status, the price, the unlocked features, the end of the paid period, the time the subscription actually ended, a block note after a refund or chargeback, whether it is a test or live subscription, the times of creation, change and sending of the license email, a hash of your license key and its version number (and which version was last sent by email). It does not contain your name or email address. The web space reads the current state from Stripe each time the subscription changes.

License email and notices to me. After the purchase I send your license key once by email to the address used for the purchase, together with the contract confirmation. If I issue a new key (a new version, for example because the old one was passed on), I send it to the email address Stripe holds for your subscription. The emails are sent by the IONOS mail server. If Stripe reports a refund, a dispute or suspected fraud, I receive an email with the identifier of the event, without name or address.

Managing the subscription. If you enter your license key under “Abo verwalten” (manage subscription), I forward you to Stripe’s customer portal (billing.stripe.com), where you can see your payment method and receipts. For this I only compare the key with the hashes in the license list. How the app checks the license is described in the app privacy policy.

Legal bases. Art. 6(1)(b) GDPR for activation, the license email, managing the subscription and questions about it; Art. 6(1)(c) GDPR in conjunction with section 147 of the German Fiscal Code (AO) for records I must keep; Art. 6(1)(f) GDPR for notices about refunds, disputes and suspected fraud (legitimate interest in detecting abuse and settling claims). A purchase is not possible without an email address and payment details.

Recipients. Link and Stripe (Stripe group) and IONOS SE as host and mail server (section 4).

Third country. Link and Stripe also process data in the USA. According to its own statement, Stripe, LLC (formerly Stripe, Inc.) is certified under the EU-US Data Privacy Framework; to that extent the European Commission’s adequacy decision applies (Art. 45 GDPR). For transfers not covered by it, the European Commission’s standard contractual clauses that Stripe has included in its data processing agreement apply (Art. 46(2)(c) GDPR).

Retention. I delete license list entries twelve months after the end of the paid period of a subscription that has ended. The data in my Stripe account is kept as long as I need it for the subscription and questions about it, and after that only as far as statutory retention periods apply (section 147 AO, eight or ten years).

8. Cancelling and withdrawing from contracts

With “Verträge hier kündigen” (cancel contracts here) and “Vertrag widerrufen” (withdraw from contract) at the bottom of every page you can cancel or withdraw from a subscription without an account. I process the details you enter there: type of declaration, the reason in case of termination for good cause, the requested date, your name, the email address you used for the subscription and, if you enter them, the license key and further details on the contract, plus the date and time of receipt.

I need them to find the subscription, carry out your declaration through Stripe, confirm receipt to you by email immediately and be able to prove receipt later. The confirmation goes to the email address of the purchase and, where needed, contains a link to confirm the execution, to object to it (“This wasn’t me”) or to take back a cancellation. If a license key you enter belongs to a subscription with a different email address, that address is notified as well. The emails are sent by the IONOS mail server; I receive a copy or a notice. The legal basis is Art. 6(1)(c) GDPR in conjunction with sections 312k and 356a of the German Civil Code (BGB), which require these forms and the confirmation, and Art. 6(1)(b) GDPR.

I keep the declaration and the confirmation as proof until the end of the regular limitation period, that is three years from the end of the year in which they were received (sections 195, 199 BGB), and then delete them.

9. Contact by email

If you write to me, I store your email address, your name if given and your message in order to reply. I only inform you about the beta start if you ask me to. The mailbox is hosted by IONOS SE (see Hosting), which runs it on my behalf (Art. 28 GDPR). The legal basis is Art. 6(1)(b) GDPR where a contract or its preparation is concerned, otherwise Art. 6(1)(f) GDPR (interest in answering enquiries). I delete the message once it has been dealt with and no retention obligation applies.

10. The vidioo app

This policy only applies to the website and to buying a subscription through it, not to the vidioo app. The app privacy policy applies to the app, including the check of your license.

11. Your rights

You have the right to free access to the personal data stored about you, and the right to rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Write to: business (at) michael-schuier (dot) de

Right to object (Art. 21 GDPR): Where I process data on the basis of Art. 6(1)(f) GDPR (server logs, protection of the waitlist against abuse, notices about refunds and disputes, email enquiries), you may object at any time on grounds relating to your particular situation. I will then no longer process this data unless there are compelling legitimate grounds that override your interests or the processing serves the establishment, exercise or defence of legal claims.

12. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the law (Art. 77 GDPR).

13. Deletion of data

Data is deleted or blocked as soon as the purpose of storage no longer applies, unless statutory retention obligations prevent this.

14. Encryption

The site is delivered exclusively over encrypted HTTPS.

15. Changes

This privacy policy is updated when the data processing or the legal situation changes.